CVE-2018-10884

Ansible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF) in awx/api/authentication.py. An attacker could exploit this by tricking already authenticated users into visiting a malicious site and hijacking the authtoken cookie.
References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10884 Issue Tracking Vendor Advisory
http://www.securityfocus.com/bid/105136 Third Party Advisory VDB Entry
Configurations

Configuration 1

cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*

Information

Published : 2018-08-22 02:29

Updated : 2019-10-09 11:33


NVD link : CVE-2018-10884

Mitre link : CVE-2018-10884

Products Affected
No products.
CWE